Trust at Nirvest
Your data stays yours. Here is what that means in plain words, with a link to the detail behind each promise.
Last reviewed 17 October 2026.
Your firm's content is encrypted with its own key.
Everything is encrypted in transit and at rest. On top of that, much of the content in Nirvest Lens, old and new, is scrambled inside our application with a key that belongs to your firm alone, so a copy of our database, or a look inside it, shows only unreadable text for the content listed here. Here is exactly what is covered today.
How this works: Your firm's content is encrypted with its own key.What is protected today
- Email templates and signatures
- Nirvu AI chats, briefs, summaries and translations
- Meeting titles, notes, summaries, decisions and action items
- Notes, and tasks (titles and details)
- Suggestions and notifications
- Phone numbers and push-notification keys
- Emails (subjects, bodies and addresses)
- Calendar events
- Uploaded files (documents, receipts, imports and Nirvu AI uploads) and exports
- Company and people records (names and details)
- Deal and investor-network details
- Document titles and extracted text, and the parsed data from imports
- Research and score explanations, and portfolio updates
- Learned preferences and Nirvu AI Tax reports
This covers older content as well as new. Older company, people, document, research and portfolio content has been protected since 16 Oct 2026, and older imports since 16 Oct 2026.
Coming next
- Portfolio and capital figures, and the amounts in Fees
- Photos, logos and profile images
Almost all content is covered now and the rest follows. Portfolio and capital figures, the amounts in Fees, and photos, logos and profile images are not encrypted this way yet. Until each area is covered, it is still protected by encryption in transit and at rest, and by the walls between firms.
Sign in with the account you already trust
You sign in with Google or Microsoft. Nirvest never asks for or stores a password for your account, so there is no Nirvest password of yours to lose.
How this works: Sign in with the account you already trustEvery firm is walled off
Other firms cannot see your deals, contacts or notes. The database itself enforces this on every request, not just the app.
How this works: Every firm is walled offYour content is yours
You own what you put into Nirvest Lens. It belongs to your firm, not to any one person on your team, so it stays with the firm if a member leaves.
How this works: Your content is yoursNirvu AI reads investing mail only
Obvious noise such as newsletters and receipts is filtered out without any AI involvement. Nirvu AI reads only mail that looks investing-related, and nothing from before you connected.
How this works: Nirvu AI reads investing mail onlyNever sold. No ads. No AI training.
We do not sell your data and there is no advertising in Nirvest. We do not use your content to train AI models.
How this works: Never sold. No ads. No AI training.You stay in charge of your records
When Nirvu AI proposes a change to your records, you see it and confirm it before it is saved.
How this works: You stay in charge of your recordsOur own access is limited and recorded
Our staff use a separate system that needs an authenticator app and has no screen that shows your content, other than what you send us yourself, such as a bug report. Support mode is a 60-minute, logged window on one workspace that adds a few fixed summaries, such as job statuses, never your emails, documents or notes.
How this works: Our own access is limited and recordedA mailbox cannot be quietly moved
Each mailbox belongs to one workspace at a time. Releasing it so another firm can connect it is a recorded action, and repeated moves or connection attempts are flagged to our team for review.
How this works: A mailbox cannot be quietly movedTake your data, or delete it
Export your data from the Export Center where your workspace admin allows it. A workspace admin can close the workspace in Settings. Our policy is to delete it on day 30, its encryption key first; this is being switched on in stages.
How this works: Take your data, or delete it
What this does and does not mean
- Each firm has its own key. The keys are protected by a master key in Google Cloud's key service that cannot be exported, and every use of it is recorded in Google Cloud's audit logs.
- Our admin console shows account details, counts and billing, never your content, other than what you send us yourself, such as a bug report with its screenshots. We still see minimal account details: your login identity, your firm's name, the billing identity used for GST invoices, and usage and billing numbers.
- Our application has to decrypt your data in order to work with it. A person who changed and deployed our application could therefore read data. That would leave a record in our deployment history and in the key service's audit log, which we cannot erase.
- Backups taken before the switch-on date may still hold older, unscrambled copies until they expire.
Our Confidentiality Commitment
Your content is your firm's business, not ours. We do not sell it, show ads against it or train AI on it. The only others who handle it are the providers we need to run Nirvest Lens, and only to help provide the service to you.
Vanshaj Sharma, Director, Nirvest Tech Private Limited
Read the full commitmentBeing straight with you
- Nirvest is an early-stage company.
Found a problem?
Write to us at support@nirvestlens.com. If you report a security issue in good faith, we acknowledge it within 3 business days, update you at least every 14 days, and take no legal action over research that follows our policy.